login-securite/DonPAPI

Health v2 · maintenance only

Adoption not part of the score

1417 stars · 160 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DonPAPI is a Python CLI tool that remotely dumps DPAPI-protected secrets (browser credentials, certificates, WiFi passwords, and more) from multiple Windows machines with defense evasion in mind. It includes a Flask web GUI for browsing collected loot.

Use cases

• dump dpapi credentials remotely from windows machines
• extract chromium and firefox saved passwords and cookies during a pentest
• recover windows certificates and credential manager secrets
• collect wifi and vnc passwords from compromised hosts
• harvest chrome refresh tokens across a domain
• browse dumped credentials in a web interface

When to choose

• you are doing authorized red team or penetration testing on Windows/Active Directory environments
• you need to automate DPAPI secret dumping at scale with OPSEC considerations
• you want a GUI to explore collected credentials

When to avoid

• you need a defensive auditing tool rather than offensive credential extraction
• you lack authorization to access the target systems
• you need a cross-platform credential manager for personal use

Facets

cli-tool · maturity active

security penetration-testing cli gui security penetration-testing windows developer-tools windows python cli dpapi credential-dumping red-team pentesting secrets-dump defense-evasion active-directory linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="login-securite/DonPAPI")